Security Advisories (3)
CVE-2017-0373 (2017-05-10)

The gen_class_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model (aka libconfig-model-perl) before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file.

CPANSA-Config-Model-2017-01 (2017-05-10)

YAML or YAML::XS can be loaded automatically making it possible to run arbitrary code loading a specially crafted YAML file.

CVE-2017-0374 (2017-05-10)

Loads models from a local directory, making it possible to substitute the model.

NAME

Config::Model::Value::LayeredInclude - Include a sub layer configuration

VERSION

version 2.044

SYNOPSIS

# in a model declaration:
'element' => [
  'include' => {
    'class' => 'Config::Model::Value::LayeredInclude',

    # usual Config::Model::Value parameters
    'type' => 'leaf',
    'value_type' => 'uniline',
    'convert' => 'lc',
    'summary' => 'Include file for cascaded configuration',
    'description' => 'To support multiple variants of ...'
  },
]

DESCRIPTION

This class inherits from Config::Model::Value. It overrides store_cb to trigger a refresh of layered value when value is actually changed. I.e. changing this value will reload the refered configuration file and use its values as default value. This class was designed to cope with multistrap configuration.

CAUTION

A configuration file can support 2 kinds of include:

  • Layered include which sets default values like multistrap or ssh. These includes are read-only.

  • Real includes like apache. In this cases modified configuration items can be written to included files.

This class works only with the first type

AUTHOR

Copyright 2011,2013 Dominique Dumont <ddumont at cpan.org>

AUTHOR

Dominique Dumont

COPYRIGHT AND LICENSE

This software is Copyright (c) 2013 by Dominique Dumont.

This is free software, licensed under:

The GNU Lesser General Public License, Version 2.1, February 1999